The Okta Mobile app is available for iOS in the Apple App Store and for Android in the Google Play Store. End users simply search for Okta Mobile in the appropriate store.

Okta also provides an alternative way to access the Android version of Okta Mobile, useful in places where the Google Play Store is not available. For details, see Distributing Okta Android Apps in China.

Sign on for the first time

When end users first launch Okta Mobile, they are prompted to enter their company name and Okta credentials (username and password). If you have enabled multifactor authentication (MFA) for your organization, your end users are required to complete the extra factor request to sign in.

If your organization uses OMM and you have set up an OMM policy, your end users are prompted to enroll their device in OMM.

Important notes:

Okta Mobile Android currently does not support email as an MFA factor.

Your users are prompted to lock the Okta Mobile app to ensure that no one can access their Okta apps if their mobile device is lost or stolen.

Unlock Okta Mobile with a PIN

By default, your users are required to set a PIN which they must enter when accessing Okta Mobile (assuming fingerprint unlocking is not setup). If end users forget their PIN, they can click the Sign Out • Reset PIN link on the Enter your PIN dialog.

Unlock Okta Mobile with a fingerprint

When this feature is enabled, end users can unlock Okta Mobile with a fingerprint.

Note: Fingerprint authentication for iOS and Android are separate features. If you want to enable fingerprint authentication for both your iOS and Android end users, you will need to ask for them both.

If an end user already has a fingerprint set up on their device, they are prompted to turn on fingerprint verification when they first download or update to Okta Mobile 3.2.2 or higher. Otherwise, they must first set up a fingerprint on their device's Security settings, then tap the Use fingerprint to sign in toggle in Okta Mobile Settings.

If your end users use Okta Mobile to enroll in OMM with Android for Work, they must re-enable fingerprint verification after enrollment. Users with Android 7.0+ devices must set up a separate fingerprint for their work profile, then return to Settings in the Okta Mobile app to turn on fingerprint verification.

Unlock Okta Mobile with Face ID (iPhone X only)

When this feature is enabled, iPhone X device users can unlock Okta Mobile with face recognition.

iOS devices: If you are using an iOS device, your applications are displayed in a chiclet view (Tile View), much like Okta's web application:

You can change the display to a list of applications via the Settings menu.

Android devices: If you are using an Android device, your applications are also displayed in a chiclet view; however, there is no list view available. Note: As a security precaution, Okta does not support downloading files or opening attachments from within the Okta Mobile for Android webview. For details, see Caveat.

If you have granted end users permission to edit app passwords, they can do so from their mobile device.

From their Okta Mobile Home page, end users find the app that requires a credential change.

End users edit credentials like this:

iOS Devices: Tap and hold the app icon. An App Settings screen appears displaying your Username and Password. If you have permissions to edit your password, the field is editable. Type in a new password, then click Done.

Android Devices: Tap and hold the app icon. A Settings screen appears. If you have permissions to edit your password, that field will be editable. Type in a new password, then click Save.

Password changes end users make to their applications in Okta Mobile are automatically remembered by the Okta Service.

Note: Most of these apps provide a backup URL from which users can sign in using their normal username and password.

The ability to access mobile versions of these apps, enabled for SAML, depends on the application itself. Apps such as SFDC and Box support SAML in their mobile applications; however, there are some Independent Software Vendors (ISVs) that still require a login username and password for mobile support. To confirm the status of your mobile support, check with the affected ISVs.

Downloading files from within Okta Mobile for Android webview is not supported – As a security precaution, Okta does not support downloading files or opening attachments from within the Okta Mobile for Android webview. This restriction is intended to minimize the threat from malware as well as prevent end users from preserving copies of company resources. Okta enforces no restriction on opening files that don't require saving to disk.